Crypto: At 22, He Pleads Guilty in $245 Million Fraud Case
Malone Lam, 22, pleads guilty in a case involving the theft and laundering of more than $245M in crypto through social engineering.

At 22, Malone Lam has pleaded guilty in one of the largest cryptocurrency theft cases recently handled by U.S. justice authorities. The Singaporean national is described as one of the organizers of an international network that stole and laundered more than $245 million in cryptocurrency. The operation relied less on blockchain vulnerabilities than on social engineering, targeting wealthy holders and, in some cases, burglaries.
A crypto network built on social engineering
Malone Lam pleaded guilty on September 8 before a federal court in Washington to one count of participating in a RICO conspiracy. The case comes amid a growing role for structured criminal networks in crypto fraud. Bref Crypto recently reported that FinCEN had traced $12.7 billion in suspicious activity linked to scam compounds.
According to the U.S. Department of Justice, the organization linked to Lam had operated since at least October 2023 and included members based in California, Connecticut, New York, Florida and abroad. Several participants had met through online gaming platforms.
Their main weapon was not a vulnerability in Bitcoin or a smart contract. Prosecutors primarily describe social engineering operations designed to persuade victims to disclose the information needed to access their assets.
In some cases, the network allegedly went a step further by burglarizing homes to obtain hardware wallets or sensitive information. This professionalization recalls the scam-center networks now being jointly targeted by the United States and the United Kingdom.
Lam, known by the pseudonyms “Anne Hathaway,” “$$$” and “King Greavy,” notably identified targets and coordinated various participants, according to authorities.
Up to $500,000 spent in a single night
Some of the stolen crypto quickly left the wallets to fund an extravagant lifestyle. The DOJ cites nightclub spending of up to $500,000 for a single night. Luxury bags worth tens of thousands of dollars were also allegedly handed out at some parties.
The watches cost between $100,000 and more than $500,000. They were joined by luxury clothing, rental homes in Los Angeles, Miami and the Hamptons, private-jet travel and security personnel.
The network also had a fleet of exotic cars valued at approximately $100,000 to $3.8 million per vehicle. These figures illustrate how quickly some of the stolen funds were converted into physical goods.
Laundering remains one of the most sensitive aspects of major crypto cases. Digital assets can be moved very quickly between multiple wallets, services and blockchains before being converted into traditional currency or luxury goods. Bref Crypto recently documented another scheme involving bitcoins stolen through Coldcard and subsequently moved via THORChain and CoinJoin.
Lam was arrested in Miami on September 18, 2025, the day after his federal indictment. The investigation notably involves the FBI and IRS Criminal Investigation.
Crypto security goes beyond the wallet
Malone Lam’s guilty plea now brings him closer to sentencing. Federal Judge Colleen Kollar-Kotelly has scheduled a follow-up hearing for December 8, 2026.
The sentence will be determined after that hearing, based on the case file and the applicable federal rules.
The case extends far beyond the path of a single defendant. Above all, it highlights a weakness sometimes overlooked when discussing crypto security: protecting a private key with a hardware wallet is not enough when its owner can be manipulated, monitored or directly targeted.
Attacks are evolving in this direction. Bref Crypto recently reported that malware exploiting content linked to Claude was targeting passwords, exchange accounts and crypto wallets. The techniques change, but the principle remains the same: reach the user when directly breaking the cryptography is too difficult.
That is probably the main lesson of the Lam case. Bitcoin was not “hacked,” and no blockchain was broken. The attackers targeted the people who held the keys and the information needed to access the funds.
More than $245 million in crypto was allegedly stolen and laundered. For Lam, the case has now entered its decisive judicial phase. For crypto holders, it is a reminder that security begins well before a transaction is signed.